CVE-2019-9949 Details
Description
Western Digital My Cloud Cloud, Mirror Gen2, EX2 Ultra, EX2100, EX4100, DL2100, DL4100, PR2100 and PR4100 before firmware 2.31.183 are affected by a code execution (as root, starting from a low-privilege user session) vulnerability. The cgi-bin/webfile_mgr.cgi file allows arbitrary file write by abusing symlinks. Specifically, this occurs by uploading a tar archive that contains a symbolic link, then uploading another archive that writes a file to the link using the "cgi_untar" command. Other commands might also be susceptible. Code can be executed because the "name" parameter passed to the cgi_unzip command is not sanitized.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://bnbdr.github.io/posts/wd/ | CVE | ExploitThird Party Advisory |
| https://community.wd.com/t/new-release-my-cloud-firmware-versions-2-31-183-05-20-2019/237717 | CVE | Vendor Advisory |
| https://github.com/bnbdr/wd-rce/ | CVE | ExploitThird Party Advisory |
| https://bnbdr.github.io/posts/wd/ | [email protected] | ExploitThird Party Advisory |
| https://community.wd.com/t/new-release-my-cloud-firmware-versions-2-31-183-05-20-2019/237717 | [email protected] | Vendor Advisory |
| https://github.com/bnbdr/wd-rce/ | [email protected] | ExploitThird Party Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-59 | Improper Link Resolution Before File Access ('Link Following') | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| westerndigital my cloud firmware | < 2.31.183 |
CPE
Remediation
| |
| westerndigital my cloud | All versions |
CPE
Remediation
| |
| westerndigital my cloud mirror gen2 firmware | < 2.31.183 |
CPE
Remediation
| |
| westerndigital my cloud mirror gen2 | All versions |
CPE
Remediation
| |
| westerndigital my cloud ex2 ultra firmware | < 2.31.183 |
CPE
Remediation
| |
| westerndigital my cloud ex2 ultra | All versions |
CPE
Remediation
| |
| westerndigital my cloud ex2100 firmware | < 2.31.183 |
CPE
Remediation
| |
| westerndigital my cloud ex2100 | All versions |
CPE
Remediation
| |
| westerndigital my cloud ex4100 firmware | < 2.31.183 |
CPE
Remediation
| |
| westerndigital my cloud ex4100 | All versions |
CPE
Remediation
| |
| westerndigital my cloud dl2100 firmware | < 2.31.183 |
CPE
Remediation
| |
| westerndigital my cloud dl2100 | All versions |
CPE
Remediation
| |
| westerndigital my cloud dl4100 firmware | < 2.31.183 |
CPE
Remediation
| |
| westerndigital my cloud dl4100 | All versions |
CPE
Remediation
| |
| westerndigital my cloud pr2100 firmware | < 2.31.183 |
CPE
Remediation
| |
| westerndigital my cloud pr2100 | All versions |
CPE
Remediation
| |
| westerndigital my cloud pr4100 firmware | < 2.31.183 |
CPE
Remediation
| |
| westerndigital my cloud pr4100 | All versions |
CPE
Remediation
| |
Change History
5 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Nov 21, 2024 | CVE Modified | CVE |
| May 14, 2024 | CVE Modified | [email protected] |
| May 29, 2019 | Initial Analysis | [email protected] |
| May 28, 2019 | CVE Modified | [email protected] |